Explore and visualize case data
Elastic Cloud Serverless projects are autoscaled environments, fully managed by Elastic and available on Elastic Cloud. Availability This functionality is generally available and ready for production usage. Serverless interfaces and procedures might differ from classic Elastic Stack deployments. The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats. Availability This functionality is generally available and ready for production usage. This functionality is in technical preview and is ready for evaluation. Use with caution in production; it is not recommended for mission-critical workloads. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features. Specific Support terms apply. Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments. This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.
Serverless
Generally available
Stack
GA
9.5+
…
Generally available since 9.5
Preview from 9.2 to 9.4
Case analytics data behaves like any other Elasticsearch data in Discover and Lens, so you can inspect individual cases and build charts to spot trends. How you reach the data depends on your version.
The first time a case is created or used in a space, Kibana creates a managed Case Analytics data view that covers all three analytics indices and is ready to use in Discover and Lens.
- Go to Discover or Lens.
- Select the Case Analytics data view.
- Search, filter, and visualize case fields. To find typed case fields in the field list, filter by
_as_(for example,case.effort_as_integer).
You can save visualizations to dashboards and use the same indices as the basis for alerting rules, like any other Elasticsearch data.
Create a data view that points to one or more case analytics indices or their aliases. To point to all case analytics indices in your space, use the .internal.cases* index pattern.
Case data is stored in hidden indices. To display hidden indices, select Show advanced settings, then turn on Allow hidden and system indices.
Query case data with ES|QL to calculate metrics like case volume, closure rates, and mean time to respond (MTTR).